Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PDbIhzKDk-chud_C58EAQHJogzU.roa
File: PDbIhzKDk-chud_C58EAQHJogzU.roa (raw, json)
Hash identifier: x1lClC5WUFiUkRbHFDMG61Zsyz5CDiRZEOQJXsi11NY=
Subject key identifier: 3C:36:C8:87:32:83:93:E7:21:B9:DF:C2:E7:C1:00:40:72:68:83:35
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018E7F422567D1909034BB718CC56E6218C7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PDbIhzKDk-chud_C58EAQHJogzU.roa
Signing time: Wed 27 Mar 2024 09:33:45 +0000
ROA not before: Wed 27 Mar 2024 09:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 147.45.136.0/22 maxlen: 22
147.45.140.0/22 maxlen: 22
147.45.176.0/22 maxlen: 22
147.45.180.0/22 maxlen: 22
147.45.184.0/22 maxlen: 22
193.233.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 11:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:42:25:67:d1:90:90:34:bb:71:8c:c5:6e:62:18:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 27 09:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c36c887328393e721b9dfc2e7c1004072688335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:30:e6:d0:b6:59:01:c5:d6:91:c5:b1:bc:
b3:d4:df:54:c9:e5:f8:db:23:fc:db:a4:17:1b:ba:
cc:49:d7:01:ac:55:75:e8:4c:8b:4f:65:ff:ce:70:
b7:31:9e:da:c7:09:d4:29:76:97:2d:1c:4b:4e:dc:
83:36:ba:3b:4d:4d:76:75:40:ce:4f:47:1e:05:5f:
39:e9:7a:09:e0:6e:3e:55:61:0b:2b:08:cd:04:74:
dc:11:b1:1a:2b:2f:25:c8:38:22:5b:4c:ec:2a:05:
86:de:3a:a5:c8:04:67:8f:9a:f2:91:d2:46:a5:40:
a5:76:90:6d:f6:22:2d:6d:32:3e:c2:40:78:2e:68:
3f:8c:ce:79:32:3a:af:16:bb:7f:5a:46:2d:73:4a:
d7:94:3c:fc:75:17:a5:57:cf:bd:7e:0e:69:cd:f9:
1e:30:f2:2b:62:c0:5d:bd:67:af:2e:d6:73:36:ad:
89:67:7d:53:39:82:61:71:cb:33:d7:76:fd:cb:e1:
c7:0a:0c:45:5f:1c:2c:64:ba:7e:a0:36:5a:a0:39:
93:3b:0a:f1:68:0e:6a:fc:72:35:ca:db:e1:a1:4c:
ec:0e:02:c0:23:3a:04:41:f4:41:93:db:7c:05:9e:
92:7e:01:16:07:38:07:40:4b:4c:12:51:56:16:61:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:36:C8:87:32:83:93:E7:21:B9:DF:C2:E7:C1:00:40:72:68:83:35
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PDbIhzKDk-chud_C58EAQHJogzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.136.0/21
147.45.176.0-147.45.187.255
193.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:30:26:99:eb:78:ec:7b:59:a2:23:a1:02:54:eb:c6:63:ed:
1d:7b:50:7e:d6:97:16:75:4a:28:38:7b:ee:51:58:bf:8d:6e:
32:b9:0e:4d:6d:95:47:77:82:4f:e0:e0:7c:27:f8:c0:ae:ee:
bb:b9:33:ca:68:7e:38:79:06:70:9e:50:bf:c5:c2:03:e5:f8:
ff:ff:e1:32:4c:b8:ae:e0:a1:a1:52:5a:5e:fa:88:24:08:9c:
fc:28:52:ec:5e:b6:00:99:ab:95:10:56:f4:e7:c8:ca:6a:3a:
2c:b0:7a:57:04:b9:9a:1e:d2:a8:c6:c2:62:2b:c1:bf:2b:36:
6d:a5:18:90:f8:5d:90:e2:33:2e:ff:4e:6f:8f:bb:21:bc:93:
52:1b:df:53:94:ac:1e:af:7b:f0:df:78:0c:de:98:5b:4e:f0:
9d:45:7d:50:bf:a7:57:b3:8e:d0:7a:eb:96:4b:ab:20:d4:10:
50:34:fd:75:0e:e4:72:b4:01:1b:95:b2:cf:3a:a0:e0:6b:b9:
ea:b9:72:6c:9a:ee:64:a3:44:71:b1:f4:02:15:7a:bb:51:91:
78:27:8f:07:a4:63:08:7d:28:57:6b:c6:00:6f:22:ae:c2:7e:
29:35:fc:bf:b8:1e:f4:bf:80:b6:07:7d:09:be:4d:af:cd:1f:
ad:ca:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 14:33:34 2024 by rpki-client on console-ams.rpki-client.org